| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | Add ILocalRefPolicy to validate local file reference paths against data root | Stefan Boberg | 38 hours | 1 | -4/+7 |
| | | | | | | | | | Restrict local-ref file paths to the server's data directories to prevent a local process from reading arbitrary files via crafted local references. The policy uses weakly_canonical + prefix matching (fail-closed when no policy is configured). Handle-based refs bypass the policy since they rely on OS handle security. | ||||
| * | Reject local file references in package parsing by default | Stefan Boberg | 3 days | 1 | -0/+1 |
| | | | | | | | | | | | | | - Add ParseFlags enum with kAllowLocalReferences opt-in flag - Default to rejecting local refs in ParsePackageMessage and CbPackageReader, protecting against path traversal from untrusted remote clients - Add HttpService::AcceptsLocalFileReferences() virtual (default false) - Override to true in HttpStructuredCacheService and HttpProjectService, which need local refs for the local UE cooker optimization - Both server ingest paths now require IsLocalMachineRequest() AND AcceptsLocalFileReferences() before allowing local refs | ||||
| * | Dashboard overhaul, compute integration (#814) | Stefan Boberg | 14 days | 1 | -5/+6 |
| | | | | | | | | | | | - **Frontend dashboard overhaul**: Unified compute/main dashboards into a single shared UI. Added new pages for cache, projects, metrics, sessions, info (build/runtime config, system stats). Added live-update via WebSockets with pause control, sortable detail tables, themed styling. Refactored compute/hub/orchestrator pages into modular JS. - **HTTP server fixes and stats**: Fixed http.sys local-only fallback when default port is in use, implemented root endpoint redirect for http.sys, fixed Linux/Mac port reuse. Added /stats endpoint exposing HTTP server metrics (bytes transferred, request rates). Added WebSocket stats tracking. - **OTEL/diagnostics hardening**: Improved OTLP HTTP exporter with better error handling and resilience. Extended diagnostics services configuration. - **Session management**: Added new sessions service with HTTP endpoints for registering, updating, querying, and removing sessions. Includes session log file support. This is still WIP. - **CLI subcommand support**: Added support for commands with subcommands in the zen CLI tool, with improved command dispatch. - **Misc**: Exposed CPU usage/hostname to frontend, fixed JS compact binary float32/float64 decoding, limited projects displayed on front page to 25 sorted by last access, added vscode:// link support. Also contains some fixes from TSAN analysis. | ||||
| * | add support for OTLP logging/tracing (#599) | Stefan Boberg | 2025-10-22 | 1 | -1/+1 |
| | | | | | | | | | - adds `zentelemetry` project which houses new functionality for serializing logs and traces in OpenTelemetry Protocol format (OTLP) - moved existing stats functionality from `zencore` to `zentelemetry` - adds `TRefCounted<T>` for vtable-less refcounting - adds `MemoryArena` class which allows for linear allocation of memory from chunks - adds `protozero` which is used to encode OTLP protobuf messages | ||||
| * | move all storage-related services into storage tree (#571) | Stefan Boberg | 2025-10-14 | 1 | -0/+138 |
| * move all storage-related services into storage tree * move config into config/ * also move admin service into storage since it mostly has storage related functionality * header consolidation | |||||